The simple answer is - never click on a link, always type the URL into your address bar. One way to check is to hover over the link, and read the target address, if it is different then it may be a phishing site, but be aware that this can be spoofed as well.

Always check the URL if it has a correct spelling. You can also check if there sight is secure by looking at the upper left of the address page. There should be a green lock and the word SECURE. Make it a habit to add the pages to your bookmark. Avoid clicking in on adds and make sure you have a separate email for money involved transactions. Use a different password as well.

It would be best to bookmark original website and use bookmarks to reach it. Always check url on address bar. I would recommend to avoid clicking links one emails, personal messages which was sent by unknown senders. Be careful with links which are hidden under URL shortener. When you are using Google search, never click on websites which are shown as ads in search results.

Always go through Google to access a site never click on a link from a forum as these can scammy. If you are using MEW, I'd luck into using MetaMask which is a Chrome extension, as it's easy to put your private key into a phising site and then all your crypto will be gone.

Leave your greed outside your email inbox/account; if you see an email/offer that sounds too good to be true, it probably is.

Always know the true status of your account and investment, don't let a scammer be the one to tell you the status of your account, when you see an email/message saying your account has been deactivated, compromised or what have you with a click here link". Just delete it, most of the time they are phising. If you must visit the site, open your browser and manually enter the site url or open it from your bookmark (you need to make it an habit to bookmark the correct url of the site where you have account or investment)

And very importantly, make Google your friend, when you see a suspected email/offer run it by Google and see what Google have to say about it

The simplest way is to bookmark the sites you frequently visit and always use that to access them. If you get an SSL certificate security warning, even if you're on the correct URL, turn back. If you receive emails/PMs from the services you use that say something is wrong, don't click the link within them and access the site through your bookmarks or manual URL input instead.

At the end of the day, there are very few phishing attacks that are sophisticated enough to fool you even if you just exercise a tiny sliver of caution. The people who had their MEW wallet hacked recently, for example, ignored the certificate issues their browsers gave them. Just keep general security practices in mind and you should be fine.

Well you easily will get the phising link from email and also on pm on this forum, don't click it please becarefull of it and the first you should do are see the url first just right click and copy the url then paste on net tab, maybe the real link will doesn't appear so that link should be phising web. So Many people out here wanna get money with steal our profile, so becarefull don't trust the other people.

To avoid scam sites I always go through Google to get where I need to be. If I'm using MEW, I always log on through Metamask. Get yourself a cold storage device it will be a great investment. Look after your private keys like it's your best friend. And stay safe - good luck!

A simple trick I've learned a couple of years ago is to check what website will I be redirected to when I click any hyperlinks present on a webpage. WhereGoes (http://wheregoes.com/ try it for yourself) simply checks the website you'll be landing once you clicked on a link or have been sent a link by someone. This wouldn't do you any harm since the host pc of the said website would take all the potential blows if in case there are malicious programs available in there or whether it's a phishing site or not. Also, when logging in to a website, always check whether it is on HTTPS since it determines whether the website you're visiting is protected and have complied to security standards or not.

It is necessary to remember to the letter all domains of important sites: bitcointalk.org, myetherwallet.com, coinmarketcap.com and some others. This will require effort, but this is the best way to avoid phishing sites!